Linux Kernel: 25 Vulnerabilities Disclosed in Single-Day Batch Affecting Multiple Subsystems
A batch of 25 Linux kernel vulnerabilities, impacting networking, memory management, and graphics, were disclosed on August 28, 2026.
Key findings
- 25 Linux kernel vulnerabilities disclosed on August 28, 2026, affecting diverse subsystems.
- Issues range from improper validation and buffer overflows to race conditions and memory handling errors.
- Networking, memory management, and graphics drivers are among the most affected areas.
- Vulnerabilities resolved in a single-day disclosure event, emphasizing prompt patching.
- Users urged to update to patched kernel versions to mitigate risks.
On August 28, 2026, a batch of 25 vulnerabilities was disclosed in the Linux kernel, spanning various subsystems including networking, memory management, and graphics drivers. These vulnerabilities, all resolved on the same day, highlight the ongoing need for diligent security patching and auditing within the kernel. The disclosures cover a range of issues, from improper validation of parameters and buffer overflows to race conditions and incorrect memory handling.
Networking Vulnerabilities
Several issues were identified within the networking stack. CVE-2026-80723 addresses an out-of-bounds read in the of:reserved_mem component when too many dynamic regions are defined during boot. The wifi:mac80211 subsystem is affected by CVE-2026-80722, where individual TWT parameters were not fully validated before driver setup, potentially allowing malformed frames to be processed. In the Bluetooth stack, CVE-2026-80721 resolves a dangling hcon reference issue in iso_conn after connection deletion. CVE-2026-80717 in sctp addresses an issue where the Adaptation Indication parameter length was not properly validated, allowing header-only parameters to be accepted. The igc driver has a fix in CVE-2026-80715 to remove napi_synchronize() in igc_down(), which could prevent proper NAPI polling completion in certain AF_XDP scenarios. Additionally, CVE-2026-80711 in ipvs prevents the propagation of a one-packet flag to synced connections, and CVE-2026-80713 ensures that per-task io_uring restrictions are preserved across exec calls. CVE-2026-80706 in can:softing addresses a firmware record parsing vulnerability where truncated records could lead to out-of-bounds reads.
Memory Management and Core Kernel Issues
Memory management and core kernel functionalities also saw several fixes. CVE-2026-80720 introduces a separate bio_set for iomap_split_ioend to prevent deadlocks when the bioset is exhausted. The mm:mglru component has a fix in CVE-2026-80719 for stale batch updates after memory control group reparenting. CVE-2026-80718 addresses bitmap overflow and accounting issues in pcpu_create_chunk(). CVE-2026-80700 in drm/vmwgfx validates external buffer object copy bounds for both stride paths, preventing potential out-of-bounds operations.
Graphics and Hardware-Specific Vulnerabilities
The graphics drivers and specific hardware components are also affected. CVE-2026-80705 in drm/amd/display adds a check for the success of dml21_add_phantom_plane() to prevent a subsequent segmentation fault. CVE-2026-80704 corrects the logging context used in get_ss_info_from_atombios(). CVE-2026-80703 in drm/amdkfd fixes a missing authorization check in KFD_IOC_DBG_TRAP_DISABLE, preventing unauthorized termination of GPU debug sessions. CVE-2026-80702 and CVE-2026-80701 in drm/vmwgfx address issues related to guest memory dirty bitfield clobbering and cursor size limits, respectively. CVE-2026-80712 in spi:spi-qpic-snand ensures the feature value is written before executing SET_FEATURE. CVE-2026-80714 in power:supply:max17040 handles missing status suppliers. CVE-2026-80715 in igc removes napi_synchronize() in igc_down(). CVE-2026-80710 in s390/dasd fixes an undersized format-check buffer. CVE-2026-80709 and CVE-2026-80708 in s390/zcrypt address incorrect domain value verification and missing memory scrubbing during key import, respectively. CVE-2026-80707 in can:j1939 initializes the receive buffer to prevent residual data issues.
Other Vulnerabilities
CVE-2026-80724 in ptp:vmclock prevents read-only mappings from becoming writable. CVE-2026-80718 in mm/percpu-km fixes bitmap overflow and accounting in pcpu_create_chunk(). CVE-2026-80716 in ALSA:pcm ensures linked drain waiters are woken on unlink.
The timely disclosure and resolution of these 25 vulnerabilities underscore the dynamic nature of kernel security. Users are advised to update to patched kernel versions as soon as possible to mitigate potential risks associated with these issues. The broad range of affected subsystems indicates that a comprehensive security strategy, including regular kernel updates, is crucial for maintaining system integrity.
CVE-2026-80724 CVE-2026-80723 CVE-2026-80722 CVE-2026-80721 CVE-2026-80720 CVE-2026-80719 CVE-2026-80718 CVE-2026-80717 CVE-2026-80716 CVE-2026-80715 CVE-2026-80714 CVE-2026-80713 CVE-2026-80712 CVE-2026-80711 CVE-2026-80710 CVE-2026-80709 CVE-2026-80708 CVE-2026-80707 CVE-2026-80706 CVE-2026-80705 CVE-2026-80704 CVE-2026-80703 CVE-2026-80702 CVE-2026-80701 CVE-2026-80700